Hacker News Reader

AFAIK the CVV is not required to perform a transaction. It's just that you take the hit in case a fraud occurs when you don't check the CVV.

Depends on your merchant account I believe. We tokenize them somehow, and can do further transactions by referencing the first transaction.